Vulnerability in Augeas

CVE-2013-6412

The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

Affected products

  • Augeas — versions 1.0.0, 1.1.0
  • N/a — versions n/a

Weakness classification (CWE)

References